AU-05 Response To Audit Processing Failures

Audit and Accountability

Low Moderate High

Description

The information system alerts appropriate organizational officials in the event of an audit processing failure and takes the following additional actions: [Assignment: organization-defined actions to be taken (e.g., shut down information system, overwrite oldest audit records, stop generating audit records)].

Supplemental Guidance

Audit processing failures include, for example, software/hardware errors, failures in the audit capturing mechanisms, and audit storage capacity being reached or exceeded. Related security control: AU-04.

Changes from Rev 4

Title changed from ‘Response to Audit Processing Failures' Adds parameter text to alert within a specific time period Discussion added regarding audit logging process failure related to storage

Compliance Mappings

ISO 27001:2022

7.5A.8.15

ISO 27002:2022

8.15

CIS Controls v8

CIS 8

PCI DSS v4.0.1

10.7

CSA CCM v4

LOG-13

CSA AICM v1

LOG-13

IEC 62443

3-3 SR 2.9

BSI IT-Grundschutz

OPS.1.1.5

ANSSI

Hygiene.29SecNumCloud.13.7

FINMA Circular 2023/1

IV.A(41)IV.C(66)IV.C(67)

OSFI B-13

B-13.3.3

EU GDPR

Art.32(1)(b)Art.32(1)(d)

EU DORA

Art.10(1)Art.10(2)

BIO2

8.15

RBI CSF

Annex1.16ITGRCA.15

FISC Security Guidelines

FISC.O11

EU CRA

CRA.I.2l

NCA ECC

2-12

UAE IA

T7

CBB TM

TM-12

Qatar NIA

OS

CBUAE

CR-3

CBE CSF

CD-1

SA JS2

JS2-7.3

CBN CSF

Part3.5

BoG CISD

CISD-VII

BoM CTRM

4.2

IOSCO Cyber Resilience

DET-1

BCBS 239

Principle 5

CPMI-IOSCO PFMI

CG.DE

FFIEC IS

III.B

NYDFS 500

500.6

HIPAA Security Rule

§164.312(b)

ECB CROE

CROE.2.4

EBA ICT Guidelines

3.4.5

SEBI CSCRF

DE.AU

CMMC 2.0

AU

10 CFR 73.54

RG5.71-A-AU

Common Criteria

CC Part 2 — FAU

Lloyd's Minimum Standards

MS8.12

NAIC Insurance Data Security

4-audit

PRA SS1/23

P5.3

HITRUST CSF v11

09.g

FDA 21 CFR Part 11

§11.10(e)

FDA Cybersecurity Guidance

SA-5

ISO 27799

12.4

SEC Custody (Digital Assets)

SEC-CD-15

ISO 17799 (legacy)

10.10.3

COBIT 4.1 (legacy)

None.